Senior DevOps Engineer (Azure)

At NiCE, we don’t limit our challenges. We challenge our limits. Always. We’re ambitious. We’re game changers. And we play to win. We set the highest standards and execute beyond them. And if you’re like us, we can offer you the ultimate career opportunity that will light a fire within you. So, what’s the role all about? NICE is building a production-grade AI platform to power intelligent automation across the enterprise. As IT DevOps Engineer on the AI Orchestration and Dev team, you are the engineer who makes sure that everything the architects design and the software engineers build actually runs, reliably, securely, and at scale. You will own the infrastructure-as-code, CI/CD pipelines, container orchestration, secrets management, and cloud cost governance for NICE's IT AI environment. You will work shoulder-to-shoulder with Software Engineers, the Cloud Architect, and the Security team to deliver a platform that developers trust and operations teams can rely on. This role sits at the intersection of platform engineering and AI operations. Beyond traditional DevOps, you will manage MLOps/LLMOps workflows, handling model deployment pipelines, compute provisioning, inference infrastructure, and AI-specific observability. If you want to be the person who keeps a cutting-edge AI platform in production, this is that role. How will you make an impact? You will own the operational backbone of NICE's AI platform, CI/CD, Kubernetes, MLOps, security, observability, and FinOps, partnering with the Architect, Software Engineers, Systems, Network, and Security teams to keep it reliable, secure, and cost-efficient. Infrastructure as Code & Cloud Provisioning Own the Terraform / Bicep codebase for all NICE IT AI Azure resources: AKS, Azure OpenAI, APIM, Storage, Key Vault, Service Bus, Azure AI Search, Azure ML, and Entra ID app registrations Enforce IaC-only provisioning (no manual resource creation), with drift detection and automated remediation Manage multiple environments (dev, staging, prod) with environment-specific configurations and promotion gates Design and operate Azure Landing Zone patterns: management groups, policies, tagging standards, and network topology CI/CD Pipeline Engineering Build and maintain GitHub Actions workflows for all AI platform components: Python services, TypeScript tooling, infrastructure modules, and container images Implement pipeline stages: lint, unit test, integration test, container build, vulnerability scan, policy check, deploy, smoke test, and auto-rollback Manage GitHub repository settings, branch protection rules, required reviewers, and environment secrets Integrate GitHub Copilot and Azure AI Foundry tooling into the developer workflow; maintain the internal developer portal Kubernetes & Container Operations Manage AKS clusters: node pool lifecycle, cluster upgrades, and certificate rotation Configure Kubernetes networking (CNI, network policies, ingress controllers, private endpoints), storage (PVCs, Azure Files, Azure Disk), and RBAC Operate the container registry (ACR): image scanning, retention policies, geo-replication, and pull-through cache Implement GitOps deployment patterns for continuous delivery to AKS MLOps / LLMOps Platform Build and operate model deployment pipelines: package LLM endpoints, manage Azure OpenAI deployments Manage Azure ML workspaces: compute clusters, environments, datasets, and model registry Operate MLflow or Azure ML experiment tracking Identity, Secrets & Security Manage Azure Key Vault: secret rotation, access policies, diagnostic logging, and integration with Kubernetes via the CSI driver Configure Managed Identities and Workload Identity for all platform services, with no password-based service principals Implement Entra ID Conditional Access and PIM for privileged access to production resources Run regular access reviews and enforce least-privilege across all Azure RBAC assignments Observability & Incident Response Design the observability stack: Azur